$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json) Hash identifier: JOvQbDQsEPdrOZNmOYbegZpxdk3GPwDKrEnSnzRIYaY= Subject key identifier: 53:39:2F:63:DD:98:B0:4C:CD:B6:80:B5:1A:AA:F5:F1:61:D6:7C:45 Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft Manifest number: 01E9 Signing time: Fri 13 Jun 2025 01:41:13 +0000 Manifest this update: Fri 13 Jun 2025 01:41:13 +0000 Manifest next update: Fri 20 Jun 2025 01:41:13 +0000 Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: 93ogM8Vwcic/QeG6qME3hHyj6OAZy+uysJ+lDMBeQEs=) 2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: ALMLm78gllLBfFwEbfYMxy6G6W9jUB1EmmnPpTHelsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Jun 13 01:41:13 2025 GMT Not After : Jun 20 01:41:13 2025 GMT Subject: CN=684b81b9-d07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:0c:36:79:97:0f:06:69:c6:fa:e3:b5:3e: 73:e3:0c:28:7a:bd:ce:0e:6a:08:eb:ad:80:fc:59: fd:c7:29:0f:8f:db:fb:36:ec:b0:7c:9d:fc:ec:82: 78:d1:7a:ef:b8:77:c6:e0:7e:6e:d1:6d:52:c5:e7: 3a:8c:4d:63:6f:e0:0d:45:fb:9d:38:6e:02:8c:54: ff:3a:35:21:c6:9b:6a:e7:4e:b4:84:73:e6:fc:bb: df:c9:fc:35:85:16:b4:1a:bd:ae:4c:5f:cd:84:e1: 1d:f1:d8:1a:72:25:25:6b:98:94:9d:57:dc:21:a5: c8:e2:93:81:70:5a:23:7d:bc:ce:17:b6:d8:b8:cf: ce:99:2c:45:45:16:9a:d7:25:10:19:cc:71:b7:48: e5:36:03:59:b2:2e:da:4d:1e:79:e3:68:3c:a6:e2: e9:8a:8b:d7:4c:6a:7a:06:8a:7d:00:4e:f2:28:73: 6f:b2:70:41:6c:ae:6e:51:c4:c3:11:8f:99:52:5e: 13:d9:e7:71:e9:b6:55:93:8c:12:14:82:6b:e1:90: 38:31:30:aa:34:0e:98:ca:86:c4:63:a7:e2:91:fd: 23:f6:52:33:95:c0:ff:70:c1:ca:9f:06:fb:b5:43: 93:ef:9d:ad:07:88:ec:86:94:1c:a5:a5:fd:81:74: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:2F:63:DD:98:B0:4C:CD:B6:80:B5:1A:AA:F5:F1:61:D6:7C:45 X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:89:1d:75:8b:b3:ca:c4:89:5d:25:77:67:dd:ac:84:97:97: 43:0f:b3:d9:fb:7d:7b:dc:68:de:10:7a:fe:f6:59:57:be:73: b2:7d:3b:89:72:a2:4b:01:5d:98:07:6e:95:05:91:45:89:9d: a8:16:87:d9:3c:94:58:2e:1b:37:e1:6b:7f:75:60:35:c7:51: 7e:e2:a3:2f:af:46:7d:1e:1b:39:58:da:62:5b:ab:93:98:40: 3b:a9:79:3a:86:e4:64:d3:d0:fb:92:bf:bc:45:64:de:23:3f: d4:48:39:42:71:4e:11:4e:0c:81:53:09:57:65:b8:a0:2c:df: e4:6d:f0:61:0b:dc:cd:6f:6d:85:74:dc:b3:04:e6:7a:3b:75: 7e:63:14:91:1d:40:1a:9b:36:5a:e3:7c:ac:dc:b4:90:4f:6b: e9:0d:e3:c7:e5:44:bb:0c:50:a7:49:8a:df:d3:51:f1:f8:0c: b7:62:65:b4:ee:22:b2:80:5e:d4:30:33:95:40:98:80:6b:4c: 51:16:78:11:5c:21:1f:a6:f4:5b:c4:44:db:46:ab:2a:7f:fe: f0:6f:d7:33:dc:72:3c:a5:3b:ed:0d:a0:3d:be:55:ac:eb:08: 46:26:f2:21:de:5e:e8:08:11:e6:4c:12:bb:5a:0f:2e:cf:7f: 05:50:fc:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjUwNjEzMDE0MTEzWhcNMjUwNjIwMDE0MTEzWjAYMRYwFAYD VQQDEw02ODRiODFiOS1kMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1gMNnmXDwZpxvrjtT5z4wwoer3ODmoI662A/Fn9xykPj9v7NuywfJ387IJ4 0XrvuHfG4H5u0W1Sxec6jE1jb+ANRfudOG4CjFT/OjUhxptq5060hHPm/Lvfyfw1 hRa0Gr2uTF/NhOEd8dgaciUla5iUnVfcIaXI4pOBcFojfbzOF7bYuM/OmSxFRRaa 1yUQGcxxt0jlNgNZsi7aTR5542g8puLpiovXTGp6Bop9AE7yKHNvsnBBbK5uUcTD EY+ZUl4T2edx6bZVk4wSFIJr4ZA4MTCqNA6YyobEY6fikf0j9lIzlcD/cMHKnwb7 tUOT752tB4jshpQcpaX9gXSPSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM5L2Pd mLBMzbaAtRqq9fFh1nxFMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS c2NUa0FpMm1pOVpEd3p3X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFiR11i7PKxIldJXdn3ayEl5dDD7PZ+3173GjeEHr+9llXvnOyfTuJ cqJLAV2YB26VBZFFiZ2oFofZPJRYLhs34Wt/dWA1x1F+4qMvr0Z9Hhs5WNpiW6uT mEA7qXk6huRk09D7kr+8RWTeIz/USDlCcU4RTgyBUwlXZbigLN/kbfBhC9zNb22F dNyzBOZ6O3V+YxSRHUAamzZa43ys3LSQT2vpDePH5US7DFCnSYrf01Hx+Ay3YmW0 7iKygF7UMDOVQJiAa0xRFngRXCEfpvRbxETbRqsqf/7wb9cz3HI8pTvtDaA9vlWs 6whGJvIh3l7oCBHmTBK7Wg8uz38FUPxW -----END CERTIFICATE-----Generated at Sat Jun 14 18:59:55 2025 by rpki-client